CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

paddle-onboarding

Check a Paddle account's onboarding status in sandbox or live — audit settings, credentials, notification destinations, catalog, domains, and verification, report what's done and missing against the go-live checklist, then fix the gaps the API allows with the user's approval.

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Medium

Suggest reviewing before use

The canonical home for this skill is paddle-onboarding in PaddleHQ/paddle-agent-skills

SKILL.md
Quality
Evals
Security

Quality

Content

77%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

An exceptionally actionable, well-sequenced operational skill: every step has executable code or commands, explicit validation checkpoints, error-recovery loops, and strong guardrails. Its weaknesses are length-driven — repeated permission/error-handling explanations and large inlined reference blocks that belong in separate files.

Suggestions

Move the MCP tool reference block and the CLI reference block into `references/` files (e.g. `references/mcp.md`, `references/cli.md`) and keep one-line pointers in SKILL.md, per progressive disclosure.

Consolidate the permission and `forbidden` guidance that currently appears in "Before you start", the CLI paragraph, and "Permissions and `forbidden`" into the single dedicated section, and merge the checkout-url domain pitfalls with the fixes-table notes to remove duplication.

Place version/date-sensitive details (CLI "v0.2.0 or later", "Accounts created before April 2024") in a dedicated old-patterns/compatibility note so they don't age the main flow.

DimensionReasoningScore

Conciseness

The body is dense and consistently Paddle-specific (MCP response shapes, CLI exit codes, permission behavior) rather than explaining known concepts, but at ~300 lines it could be tightened: permission/`forbidden` handling is repeated across "Before you start", the CLI block, and "Permissions and `forbidden`"; checkout-url domain rules appear in both the fixes table and "Common pitfalls"; and version/date-sensitive details ("v0.2.0 or later", "Accounts created before April 2024") sit outside any deprecated/old-patterns section. It fits "mostly efficient but includes some unnecessary explanation or could be tightened" rather than 4, whose over-explanation would be only minor.

3 / 5

Actionability

Everything is executable: a complete audit `async (client) => {...}` with per-read error wrapping, a runnable CLI bash function with a `--jq` secret-scrubbing filter, a copy-paste curl loop, exact MCP method paths (`client.settings.checkoutUrl.update`), per-operation permissions, and error codes with concrete recovery steps ("have the user add the domain... then retry"). This matches the fully-executable, copy-paste-ready anchor.

5 / 5

Workflow Clarity

The four-step sequence (read-only audit → report → fixes → dashboard handoff) has explicit validation checkpoints and feedback loops: "Run the whole audit with reads only, report, then propose fixes one at a time", "wait for a clear yes before writing", "Make one change at a time, then re-read it and report the result", plus per-error recovery guidance. Destructive operations are explicitly guarded ("Never delete, archive, revoke, or recreate live entities"), so the missing-validation cap does not apply.

5 / 5

Progressive Disclosure

Section structure and internal anchor links are good, but there are no bundle files at all — the MCP tool reference block, the CLI reference block, and the large method/permission tables are inlined reference material that clearly belongs in separate one-level-deep files. This matches anchor 3 ("some structure but... content that should be separate is inline"), not 4, because substantial reference content is inlined rather than just a few examples.

3 / 5

Total

16

/

20

Passed

Description

75%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A highly specific, third-person description that names the domain, the audited items, the reporting standard, and the fix scope with an approval gate. Its one structural weakness is the absence of an explicit "Use when..." trigger clause, which caps completeness and leaves a few natural trigger phrases unstated.

Suggestions

Add an explicit trigger clause, e.g. "Use when the user asks whether their Paddle account is ready to go live, what's left to set up, or why live payments aren't working yet, or before switching an integration from sandbox to live."

Include the natural phrasings users actually say ("ready to go live", "what's left to set up") as trigger synonyms alongside the domain terms.

Optionally note the complementary skills (catalog-setup, webhooks, sandbox-testing) in one clause so the boundary of this skill is visible at trigger time.

DimensionReasoningScore

Specificity

"audit settings, credentials, notification destinations, catalog, domains, and verification", "report what's done and missing against the go-live checklist", and "fix the gaps the API allows with the user's approval" enumerate multiple concrete actions covering the full check-report-fix arc in third person. It matches the comprehensive-coverage anchor, not 4, because no meaningful capability is left unspecified.

5 / 5

Completeness

The "what" is fully explicit (audit, report, fix with enumerated targets), but there is no "Use when..." clause or equivalent explicit trigger guidance — the "when" is only weakly implied by "Check a Paddle account's onboarding status". Per the rubric guideline, a missing explicit trigger clause caps this at 3; it is not 4 because anchor 4 requires both "what" and "when" to be present.

3 / 5

Trigger Term Quality

"Paddle account", "onboarding status", "go-live", "sandbox or live", and "verification" give good domain keyword coverage, including the sandbox/live synonym pair. It falls short of 5 because natural user phrases like "ready to go live" or "what's left to set up" (which the body uses but the description omits) are missing.

4 / 5

Distinctiveness Conflict Risk

"Paddle account's onboarding status", "go-live checklist", and "sandbox or live" carve out a clear niche with distinct triggers; only another Paddle onboarding-specific skill could overlap, which is minimal conflict risk. It clearly fits the "clear niche with distinct triggers" anchor.

5 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

PaddleHQ/paddle-agent-skills

Path

providers/cursor/plugin/skills/onboarding/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.